This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json) Hash identifier: xavbGZeoS7Efil0BxHGTw+ILZeaukGachRjXb6srnoc= Subject key identifier: 1C:97:B1:B2:57:80:B5:5F:51:9A:65:1A:10:BC:67:DE:00:5D:82:01 Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf Certificate serial: 019B4994EFB7CC9386A64ACE32B79CB73374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft Manifest number: 149D Signing time: Tue 23 Dec 2025 05:00:55 +0000 Manifest this update: Tue 23 Dec 2025 05:00:55 +0000 Manifest next update: Wed 24 Dec 2025 05:00:55 +0000 Files and hashes: 1: KBPaX26T74rF_b98D5vbCS4Nuz0.roa (hash: nU2QowOmWztQQgJHXXYPFT8tIem+quPQmedvSFuZH+I=) 2: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: jI0fHDlxzWCGH+PgnHU1tKXDheFIz7voMw1MuKimT4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:ef:b7:cc:93:86:a6:4a:ce:32:b7:9c:b7:33:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf Validity Not Before: Dec 23 05:00:55 2025 GMT Not After : Dec 24 05:00:55 2025 GMT Subject: CN=1c97b1b25780b55f519a651a10bc67de005d8201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:fb:95:8b:45:61:07:80:46:cd:e4:da:ba: 58:71:5c:aa:53:5e:f6:eb:f7:60:d8:c8:88:cb:e6: 03:d9:b2:76:ce:38:e8:4a:3e:a6:3f:d9:21:8c:35: 79:84:25:95:cc:31:5d:b1:ce:9a:28:e3:2e:6f:f2: c2:b0:47:cf:2b:5f:f0:ed:b0:bf:14:b1:c4:1d:28: c2:9b:d9:1a:83:2f:97:88:be:d7:99:3c:2b:92:6c: 3b:0e:3b:fc:39:8a:97:23:ed:66:b0:b3:18:cb:bf: 0e:9b:7e:2d:e2:54:e9:2c:fe:a9:61:6c:f7:89:15: 04:48:2b:9c:7f:60:07:3c:24:98:cb:9b:e5:19:b0: 3e:fd:3e:7f:3d:a0:f6:cd:49:4d:ae:54:32:e3:0e: 92:2d:bd:f9:1d:ae:74:af:71:6e:58:4c:ed:ec:3a: 2d:ab:0a:c3:f6:19:28:a5:e8:ad:f4:c9:51:c2:7f: 5e:88:b6:4e:7a:6c:52:0e:7c:0e:a1:2f:5d:6d:5c: 4c:aa:00:7d:d0:cf:39:95:08:20:d6:df:4e:f4:15: f4:1c:cb:c2:d9:ff:00:bc:cc:9b:4b:aa:7a:bf:0e: 85:5d:85:29:48:89:b9:34:e6:e6:bf:f6:80:25:7f: 0e:2f:8a:1a:ac:43:a2:25:fb:d0:57:fa:9f:1f:91: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:B1:B2:57:80:B5:5F:51:9A:65:1A:10:BC:67:DE:00:5D:82:01 X509v3 Authority Key Identifier: keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:67:bb:72:8a:a4:7c:26:9d:8b:71:0d:d1:6c:af:38:f3:0f: e6:a5:20:6f:5d:e2:5e:1d:ae:73:be:e7:93:e7:79:e2:b3:d1: 26:e7:82:15:67:92:a7:b7:06:fe:7b:4c:72:46:b6:01:c1:41: 23:59:1a:82:2a:22:ce:12:35:f7:79:f0:74:01:71:3c:f2:0b: 57:3b:df:53:27:1b:19:2e:17:07:ac:d0:00:3c:46:f3:7d:55: a7:5d:e1:92:f4:6b:cd:fe:48:b5:ac:67:0a:69:cc:66:a3:38: ba:c1:dd:a4:86:01:90:77:18:17:f3:0a:5b:07:81:63:80:5b: 5f:f2:3f:e2:75:e7:5b:e6:7a:b9:e8:55:25:a7:e3:4b:2b:78: 8a:4c:1a:33:ef:ba:24:81:2a:57:51:14:67:9a:ab:7f:8c:5f: 12:04:3f:68:f8:ad:e5:dc:0e:ee:77:b6:85:8e:e8:2f:b3:91: 46:d7:c5:e7:23:10:b0:38:cf:c0:1b:21:7d:c3:19:ba:be:2e: f2:3e:d1:fa:40:32:db:ec:20:05:db:e6:d6:7e:62:1c:4b:9e: 03:8a:6d:3e:21:16:12:31:23:4d:a5:5c:dc:62:0f:53:e1:83: f3:e5:dd:06:cc:0e:83:d1:c7:51:a3:fe:7b:92:5b:f3:3a:10: 7c:de:76:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlO+3zJOGpkrOMrectzN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODU5ZDhhMjZjOGU4ODg3NzdmNGU4MDFiMjBiNzg1ZGVl NjU0Y2YwHhcNMjUxMjIzMDUwMDU1WhcNMjUxMjI0MDUwMDU1WjAzMTEwLwYDVQQD EygxYzk3YjFiMjU3ODBiNTVmNTE5YTY1MWExMGJjNjdkZTAwNWQ4MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsz7lYtFYQeARs3k2rpYcVyqU172 6/dg2MiIy+YD2bJ2zjjoSj6mP9khjDV5hCWVzDFdsc6aKOMub/LCsEfPK1/w7bC/ FLHEHSjCm9kagy+XiL7XmTwrkmw7Djv8OYqXI+1msLMYy78Om34t4lTpLP6pYWz3 iRUESCucf2AHPCSYy5vlGbA+/T5/PaD2zUlNrlQy4w6SLb35Ha50r3FuWEzt7Dot qwrD9hkopeit9MlRwn9eiLZOemxSDnwOoS9dbVxMqgB90M85lQgg1t9O9BX0HMvC 2f8AvMybS6p6vw6FXYUpSIm5NObmv/aAJX8OL4oarEOiJfvQV/qfH5HzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByXsbJXgLVfUZplGhC8Z94AXYIBMB8GA1UdIwQY MBaAFDSFnYomyOiId39OgBsgt4Xe5lTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2Qt MTg3MjNjODQxMTIxLzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83OGZlZmMtZTljNS00YzZiLTllY2QtMTg3MjNjODQxMTIx LzEvTklXZGlpYkk2SWgzZjA2QUd5QzNoZDdtVk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGe7coqk fCadi3EN0WyvOPMP5qUgb13iXh2uc77nk+d54rPRJueCFWeSp7cG/ntMcka2AcFB I1kagioizhI193nwdAFxPPILVzvfUycbGS4XB6zQADxG831Vp13hkvRrzf5Itaxn CmnMZqM4usHdpIYBkHcYF/MKWweBY4BbX/I/4nXnW+Z6uehVJafjSyt4ikwaM++6 JIEqV1EUZ5qrf4xfEgQ/aPit5dwO7ne2hY7oL7ORRtfF5yMQsDjPwBshfcMZur4u 8j7R+kAy2+wgBdvm1n5iHEueA4ptPiEWEjEjTaVc3GIPU+GD8+XdBswOg9HHUaP+ e5Jb8zoQfN52iA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:55:12 2025 by rpki-client